Facebook has funds frozen in Brazil in another WhatsApp encrypted data dispute

Around $6 million in Facebook’s Brazilian bank account has been frozen on court order in another dispute about encrypted data involving local police authorities and Facebook-owned messaging app WhatsApp, according to the local Globo G1 news service.

The dispute pertains to WhatsApp messages that Brazilian federal police want access to to progress an international drugs investigation, ongoing since January, Reuters reports.

WhatsApp and its parent company Facebook have previously maintained they do not store nor have access to the metadata and message data Brazilian police are requesting. WhatsApp completed a rollout of end-to-end encryption across its service this April — firmly locking it out from the ability to decrypt users’ messages, and cementing its hands-off stance on users’ content.

There have been several such stand offs over encrypted data between WhatsApp and Brazilian police, with a court ordering a 48 hours block on the service last December in a similar case, although another judge subsequently lifted that block early.

Back in March Facebook’s VP in Latin American was also arrested in connection with the investigation. Then in May another local court ordered a 72 hour block on WhatsApp — which was also subsequently lifted early. It looks like local courts are now pursuing a financial penalty option to penalize the company more than its users.

The $19.5 million reais of frozen Facebook funds are equivalent to WhatsApp’s accumulated fines for non-compliance in the case, according to G1. WhatsApp does not have any bank accounts in the country — hence Facebook being targeted.

We’ve reached out to Facebook and WhatsApp for comment about the latest development and will update this post with any response.

WhatsApp CEO and co-founder Jan Koum has previously said the company has no intention of “compromising the security of our billion users around the world” by weakening its security systems in order to be able to comply with police authority requests for data.

However the counter argument, as Koum has noted, is that any deliberate weakening of security systems to afford access to specific authorities also opens the door to exploit by hackers — thereby posing a security risk to all users of a service.